Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: 3TeIZfjoaPvE6zqipCVaFfPt8LJYA3OyQd/ch03CG3U=
Subject key identifier: 53:A7:45:42:13:24:B9:63:54:E2:99:04:75:8D:DC:AF:FF:18:E4:8E
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 01974A43A0C76C8ADB8791C63644C0669C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 04DC
Signing time: Sat 07 Jun 2025 12:00:35 +0000
Manifest this update: Sat 07 Jun 2025 12:00:35 +0000
Manifest next update: Sun 08 Jun 2025 12:00:35 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: Aa98KALfJDTG1hKMQaLEoCevH0TxFQJJX9GUGajVfO4=)
2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a0:c7:6c:8a:db:87:91:c6:36:44:c0:66:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Jun 7 12:00:35 2025 GMT
Not After : Jun 8 12:00:35 2025 GMT
Subject: CN=53a745421324b96354e29904758ddcafff18e48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:fd:18:41:03:ff:95:ca:90:e7:ce:fa:7b:
43:99:a8:1d:63:3a:0c:21:a2:35:a8:ca:50:51:ec:
07:41:66:b1:d3:1a:6c:85:fb:76:6c:1b:60:03:98:
ed:0f:ff:53:bd:08:cd:46:53:6a:a7:bf:31:3f:af:
62:df:86:53:ba:56:0a:e4:c8:68:ba:41:15:42:74:
aa:9b:c4:85:48:6b:1f:82:89:22:9c:68:2a:20:a5:
11:2c:4f:42:09:e4:40:b7:66:60:b8:30:3f:59:ee:
4d:3b:5c:e4:85:42:e9:c0:79:ab:53:73:76:74:34:
51:7e:2e:95:3a:aa:d1:1e:83:ee:ff:41:d4:4f:b1:
2f:84:17:72:2b:ec:53:34:88:df:4c:d7:50:fd:ad:
71:28:69:b3:90:2d:a4:29:68:89:7b:10:f1:d4:eb:
29:7a:43:45:c6:87:d9:bd:81:04:f2:43:68:af:32:
b0:b7:08:af:a5:3b:0e:bc:f1:66:b1:7a:6a:e8:c3:
a2:0d:58:03:45:01:fc:57:95:bb:2f:af:37:3b:ad:
74:d8:b0:68:5d:75:f8:f1:ee:a1:aa:b1:f8:8e:8e:
b0:5b:e4:a9:69:e4:31:67:d5:88:f7:01:65:c6:6b:
4e:29:04:47:76:cd:8a:e3:3a:84:bd:98:94:7c:1c:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:45:42:13:24:B9:63:54:E2:99:04:75:8D:DC:AF:FF:18:E4:8E
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e5:2e:11:7f:e2:91:f7:12:53:9e:ff:6a:7a:46:91:5d:df:
08:87:17:4c:13:3c:7f:9b:88:43:a5:4b:ac:f4:1d:b0:9a:fe:
89:10:3f:3e:ce:80:9f:f6:9d:69:2e:07:fa:20:51:d5:86:6c:
f5:d8:a4:de:d0:6c:33:1b:ff:e0:85:c1:e2:e0:cb:bf:bd:6b:
fb:77:90:48:af:b4:6b:9c:d5:4b:1f:01:2e:64:50:d0:3e:c5:
87:27:d3:6c:de:3c:06:6d:0a:62:ad:f4:fe:66:72:de:ab:04:
6d:1b:7f:78:c9:8f:2a:59:07:48:db:34:a6:09:73:e9:6d:88:
e6:b3:ac:a6:01:11:d5:87:72:1d:58:de:9a:34:9d:4d:e8:b1:
fd:15:7c:7c:da:41:7a:9e:68:0b:79:5f:cb:b8:6b:20:10:bf:
c9:79:d5:b7:55:6d:cb:b5:1c:62:e7:c5:d6:16:7d:d1:ee:4c:
1b:2c:b4:fd:8c:da:9f:7b:12:65:2a:92:76:74:02:4d:54:f2:
fc:3f:4c:2a:fd:ab:66:94:45:dc:33:68:a0:3f:53:a4:2f:8b:
3e:36:73:9b:a1:9a:e8:53:26:ab:bf:c8:2d:dc:e3:c6:26:fc:
96:26:94:ec:b7:e8:ba:36:76:70:b8:77:6b:12:ff:39:14:ce:
0d:dc:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:16 2025 by rpki-client